Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
File: qYz7m19EX9L2zPoXnDfFNEmyrwY.mft (raw, json)
Hash identifier: 0F3Tzynepr0p0H604m1SunGnHdoC5/7PMeJplgOLtxE=
Subject key identifier: BC:72:E2:2C:9E:ED:36:00:3B:7E:CE:2F:BB:17:5D:5F:AF:DC:52:A4
Authority key identifier: A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
Certificate issuer: /CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Certificate serial: 019D38D3681C669237596E09DFD20338A0CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:01:11 +0000
Manifest this update: Sun 29 Mar 2026 09:01:11 +0000
Manifest next update: Mon 30 Mar 2026 09:01:11 +0000
Files and hashes: 1: OLNyTBFLB0GRgG6WCzbXR7UvRrA.roa (hash: I/YlyloEBTVluHRzMYW18o3EO4jxYYroq7F9Zg2Jggo=)
2: fCBNQoZpXWRf7HiESYlfI6ubNuI.roa (hash: Xi95Rj4tFLGoeBm6XrdM9ofNJV6OvWlEYiGW/UAuLU4=)
3: qYz7m19EX9L2zPoXnDfFNEmyrwY.crl (hash: Cbq6ijlxzYbfXqpZX3/OJUuHS59qiSAVe2j2f0TfNYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:68:1c:66:92:37:59:6e:09:df:d2:03:38:a0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Validity
Not Before: Mar 29 09:01:11 2026 GMT
Not After : Mar 30 09:01:11 2026 GMT
Subject: CN=bc72e22c9eed36003b7ece2fbb175d5fafdc52a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ab:ca:39:d4:93:33:f6:53:17:fe:f3:e7:5d:
0e:57:24:7c:e0:3f:7f:59:b9:42:7a:ee:bc:12:10:
86:61:45:12:ec:12:52:0d:e6:55:e8:24:eb:59:32:
4a:de:07:26:10:1d:6f:cd:ec:b5:a5:6b:9c:16:ca:
f8:0d:63:8e:25:2f:cc:6e:48:94:ca:e0:99:56:4e:
c0:74:8c:66:7c:97:69:0b:77:9b:e5:b0:98:bc:a7:
d4:63:c8:0e:9e:09:75:1a:f3:db:a8:d0:44:f9:c7:
f7:76:10:34:dc:05:2c:22:2f:1c:96:e8:2e:aa:31:
8b:f4:0e:bd:65:53:31:50:36:d4:95:5b:a9:61:2a:
f8:7e:cc:23:38:71:d7:ee:d6:f5:8f:5c:2a:86:73:
1f:62:18:87:42:f8:be:bc:bc:f6:57:6c:89:66:1f:
8c:da:82:ba:00:2e:3f:58:a7:ba:01:a0:e2:de:34:
3f:b0:73:f8:44:d2:e2:a4:51:c1:e0:ce:37:ef:b1:
24:0f:14:9a:50:7d:1f:f4:82:81:50:43:cd:bb:e0:
ef:84:e1:ff:f3:30:39:ea:5a:bf:61:4d:ad:f0:e6:
95:48:61:11:13:79:06:6a:4c:32:77:24:f5:0b:ba:
96:cd:e9:f9:ef:81:13:17:71:ec:77:1d:2e:82:0d:
3d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:72:E2:2C:9E:ED:36:00:3B:7E:CE:2F:BB:17:5D:5F:AF:DC:52:A4
X509v3 Authority Key Identifier:
keyid:A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:92:ea:58:94:88:90:30:23:85:00:9d:ab:44:ea:8a:eb:1a:
11:71:f7:4b:e2:a1:48:31:c0:48:da:9f:99:72:8c:3d:3a:77:
f4:ff:6e:2c:d2:fb:48:b4:cb:0f:a8:a5:ba:32:4a:5b:8e:42:
d0:8d:f2:28:f1:a6:e9:25:93:66:c3:0e:82:5e:05:7e:e2:b4:
af:1b:d2:a1:6c:62:b6:5b:78:43:04:60:f3:4f:f3:ad:ef:7c:
5c:df:75:d2:4c:19:5f:51:f1:9f:84:30:da:61:40:a9:8b:be:
1f:dc:77:c0:56:e0:f4:98:a8:b9:73:c9:17:88:ae:f8:a3:b3:
d2:3d:f4:de:38:42:72:22:14:4e:51:01:cf:73:37:62:bf:ed:
8a:2d:17:98:d6:13:3d:e9:de:62:4c:4a:45:d8:47:2f:97:53:
0f:ef:9b:be:5a:f0:d1:4a:b0:a2:bb:0a:fb:d8:9d:36:ce:b3:
25:6a:3f:e3:4f:ad:d9:01:ab:82:98:29:2a:e4:61:3d:f0:65:
c1:63:98:24:fe:e3:d0:25:48:63:1d:e9:2f:f6:eb:19:e1:fe:
08:94:a8:f1:f8:32:2d:e0:33:91:52:fa:45:98:9c:b1:2f:db:
89:ee:d1:92:eb:89:31:3a:d2:18:47:4d:5c:52:2d:82:7e:2a:
ec:e9:0f:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0402gcZpI3WW4J39IDOKDLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5OGNmYjliNWY0NDVmZDJmNmNjZmExNzljMzdjNTM0NDli
MmFmMDYwHhcNMjYwMzI5MDkwMTExWhcNMjYwMzMwMDkwMTExWjAzMTEwLwYDVQQD
EyhiYzcyZTIyYzllZWQzNjAwM2I3ZWNlMmZiYjE3NWQ1ZmFmZGM1MmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6vKOdSTM/ZTF/7z510OVyR84D9/
WblCeu68EhCGYUUS7BJSDeZV6CTrWTJK3gcmEB1vzey1pWucFsr4DWOOJS/MbkiU
yuCZVk7AdIxmfJdpC3eb5bCYvKfUY8gOngl1GvPbqNBE+cf3dhA03AUsIi8clugu
qjGL9A69ZVMxUDbUlVupYSr4fswjOHHX7tb1j1wqhnMfYhiHQvi+vLz2V2yJZh+M
2oK6AC4/WKe6AaDi3jQ/sHP4RNLipFHB4M4377EkDxSaUH0f9IKBUEPNu+DvhOH/
8zA56lq/YU2t8OaVSGERE3kGakwydyT1C7qWzen574ETF3Hsdx0ugg09RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxy4iye7TYAO37OL7sXXV+v3FKkMB8GA1UdIwQY
MBaAFKmM+5tfRF/S9sz6F5w3xTRJsq8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVl6N20xOUVYOUwyelBvWG5EZkZORW15cndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9kZjg1NTEtM2Y5Zi00NGIyLWI3ZTQt
ODg2NTkzZjdkY2UwLzEvcVl6N20xOUVYOUwyelBvWG5EZkZORW15cndZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9kZjg1NTEtM2Y5Zi00NGIyLWI3ZTQtODg2NTkzZjdkY2Uw
LzEvcVl6N20xOUVYOUwyelBvWG5EZkZORW15cndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZLqWJSI
kDAjhQCdq0TqiusaEXH3S+KhSDHASNqfmXKMPTp39P9uLNL7SLTLD6ilujJKW45C
0I3yKPGm6SWTZsMOgl4FfuK0rxvSoWxitlt4QwRg80/zre98XN910kwZX1Hxn4Qw
2mFAqYu+H9x3wFbg9JiouXPJF4iu+KOz0j303jhCciIUTlEBz3M3Yr/tii0XmNYT
PeneYkxKRdhHL5dTD++bvlrw0UqworsK+9idNs6zJWo/40+t2QGrgpgpKuRhPfBl
wWOYJP7j0CVIYx3pL/brGeH+CJSo8fgyLeAzkVL6RZicsS/bie7RkuuJMTrSGEdN
XFItgn4q7OkPgg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:51 2026 by rpki-client